205 matches found
CVE-2025-2721
CVE-2025-2721 is rejected/not used per the initial description.
Number withdrawal
libgsf is a GNOME open source library. This CVE number has been withdrawn...
Number withdrawal
libgsf is a GNOME open source library. This CVE number has been withdrawn...
CVE-2025-2720
Removed by vendor...
CVE-2025-2720
The CVE-2025-2720 entry has technical detail in a connected document: it describes a vulnerability in GNOME libgsf affecting the gsf_base64_encode_simple function. The issue arises from local-access exploitation where manipulating the size argument can cause use of an uninitialized variable. Reme...
PT-2025-12685
Name of the Vulnerable Software and Affected Versions GNOME libgsf versions up to 1.14.53 Description A critical issue affects the function gsf prop settings collect va due to the manipulation of the argument n alloced params, leading to a heap-based buffer overflow. This issue requires local...
PT-2025-12687
Name of the Vulnerable Software and Affected Versions GNOME libgsf versions up to 1.14.53 Description A problematic vulnerability has been found in the sorting key copy function of GNOME libgsf. The manipulation of the Name argument leads to an out-of-bounds read. This issue can be exploited...
PT-2025-12683
Name of the Vulnerable Software and Affected Versions GNOME libgsf versions up to 1.14.53 Description A vulnerability was found in the function gsf base64 encode simple. The manipulation of the argument size leads to the use of an uninitialized variable. The attack needs to be approached locally...
PT-2025-12684
Name of the Vulnerable Software and Affected Versions GNOME libgsf versions up to 1.14.53 Description A critical issue was found in the function gsf base64 encode simple, where the manipulation of the argument size t leads to a heap-based buffer overflow. This issue can be exploited locally. Ther...
PT-2025-12686
Name of the Vulnerable Software and Affected Versions GNOME libgsf versions up to 1.14.53 Description A critical issue affects the function gsf property settings collec. The manipulation of the argument n alloced params leads to a heap-based buffer overflow. This issue requires local attack...
libgsf: Multiple Vulnerabilities
Background The GNOME Structured File Library is an I/O library that can read and write common file types and handle structured formats that provide file-system-in-a-file semantics. Description Multiple vulnerabilities have been discovered in libgsf. Please review the CVE identifiers referenced...
GLSA-202501-07 : libgsf: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202501-07 libgsf: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in libgsf. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly fro...
Huawei EulerOS: Security Advisory for libgsf (EulerOS-SA-2025-1125)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : libgsf (EulerOS-SA-2025-1125)
According to the versions of the libgsf package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library libgsf...
Fedora 41 : libgsf (2024-ff08c2b41a)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-ff08c2b41a advisory. Fixes for memory vulnerabilities. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...
openSUSE Security Advisory (SUSE-SU-2024:3922-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2024:3920-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2024:3922-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...